Deschide articolul original într-un tab nou Schimbarea acestei opțiuni se aplică imediat și reîncarcă pagina.
LECTURA
Înapoi la articole →

Karma(In)Security

karmainsecurity.com/index.xml
Vizitează site-ul

Cel mai recent articol

Ultima verificare

Urmăritori 0 urmăritori
Articole: 12

  1. Riding The Time Machine: Journey Through An Old vBulletin PHP Object Injection

    (Karma(In)Security)

    Dust off your dial-up modem and fire up your favorite IRC client — today, we’re boarding a time machine straight into the golden era of web forums.

  2. Don't Call That "Protected" Method: Dissecting an N-Day vBulletin RCE

    (Karma(In)Security)

    vBulletin is one of the most widely used commercial forum solutions over the Internet, powering thousands of online communities ranging from niche hobbyist sites to large-scale tech forums.

  3. Hacking Kerio Control via CVE-2024-52875: from CRLF Injection to 1-click RCE

    (Karma(In)Security)

    Kerio Control, formerly known as Kerio WinRoute Firewall, is nowadays quite a popular firewall and Unified Threat Management (UTM) product owned and developed by GFI Software: according to Censys, at the moment there are around twenty thousands Kerio Cont…

  4. Zip Slip meets Artifactory: A Bug Bounty Story

    (Karma(In)Security)

    Artifactory, developed by JFrog, is an industry-leading software repository manager, a single solution for storing and managing all the artifacts, binaries, packages, files, containers, and components for use throughout the software supply chain.

  5. Exploiting an N-day vBulletin PHP Object Injection Vulnerability

    (Karma(In)Security)

    vBulletin is one of the most popular proprietary forum solutions over the Internet.

  6. ImpressCMS: from unauthenticated SQL Injection to RCE

    (Karma(In)Security)

    According to the official website ImpressCMS is an open source Content Management System (CMS) designed to easily and securely manage multilingual web sites.

  7. Tales of SugarCRM Security Horrors

    (Karma(In)Security)

    SugarCRM is a pretty popular Customer Relationship Management (CRM) application written in PHP code.

  8. Hacking Magento eCommerce For Fun And 17.000 USD

    (Karma(In)Security)

    Magento, which was acquired by Ebay Inc back in 2011, is one of the most popular e-commerce platforms written in PHP.

  9. My adventure at JoomlaDay Italy 2013 (and my thoughts on the JSST)

    (Karma(In)Security)

    Just a year ago I had the pleasure to talk about the PHP Object Injection vulnerabilities I discovered in Joomla at the JoomlaDay Italy 2013 held in Naples, one of the most beautiful cities I have ever seen.

  10. Exploiting CVE-2014-1691: Horde Framework PHP Object Injection

    (Karma(In)Security)

    Welcome to my third blog post ever, the first in this new year, but still talking about an old friend of mine.

  11. Yet Another Joomla PHP Object Injection Vulnerability

    (Karma(In)Security)

    Last week I have disclosed KIS-2013-04, another PHP Object Injection vulnerability which affects the Joomla CMS.

  12. Analysis of the Joomla PHP Object Injection Vulnerability

    (Karma(In)Security)

    Today I have disclosed KIS-2013-03, a PHP Object Injection vulnerability which affects the Joomla CMS.